secrets-provider-for-k8s icon indicating copy to clipboard operation
secrets-provider-for-k8s copied to clipboard

Enhancement: Fetch relevant K8s Secrets using a predefined label

Open sigalsax opened this issue 5 years ago • 0 comments
trafficstars

Current solution: The Secrets Provider code looks at the K8S_SECRETS environment variable in each of the pod manifests to know which K8s Secret to update with Conjur values.

Listing each K8s Secret in this way is not a scalable solution, especially for customers with hundreds of K8s Secrets.

Enhanced solution: We will offer the customer an additional option to define which K8s Secrets values are hosted in Conjur by defining them in terms of a label instead of individually. They will define the label that is attached to the K8s Secret and add it under K8S_SECRETS_LABEL environment variable in the Secrets Provider manifest.

Solution design: https://github.com/cyberark/secrets-provider-for-k8s/pull/137

sigalsax avatar Jul 02 '20 13:07 sigalsax